AMENDMENTS TO THE CLAIMS 



1. (Currently amended) A computerized method of conducting a survey, said method 
comprising: 

establishing, for at least one question in said survey, a bin, as represented in a 
memory of a computer, for each of a possible response to said question; and 

establishing, for each said bin, a perturbing mechanis m, executed by a processor 
on said computer, that perturbs a content of said bin, said perturbing mechanism having a 
statistical parameter with a known valuet 

generating a perturbed indicator vector that represents a respondent's response for 
said question, said perturbed indicator vector comprising an information structure 
including the contents of all bins of said question after each of the bins has been 
perturbed and said respondent has selected one or more said possible responses, wherein 
said perturbing mechanism comprises a random number generator and said loiown 
statistical parameter value comprises a mean value of said random number generator, 
wherein said generating the perturbed indicator vector comprises respectively adding 
numbers from the perturbing mechanism to the contents of the bins; 

if contents of a bin exceed an upper bound after perturbation, said contents are 
clamped to said upper bound; 

if contents of a bin are below a lower bound after perturbation, said contents are 
clamped to said lower bound; 

setting up a survey question by generating a medium with a plurality of markable 
areas for each possible response and pre marldng a random number of said markable 
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for each said possible response such that 



ipondent 



jpond to the survey 



question by adding a mark to any of remaining 



deed marlcable 



i, if any 



markable 



after said pre marking, of the plurality of markable 



for the 



possible response that corresponde 



desired response to the question; 



receiving, as input data to said computer, at least one response to the survey 
question; 

generating a perturbed indicator vector by countings the number of marked areas 
for each response; and 

for a plurality of responses for a question in said survey received as input data to 
said computer, analyzing the bins in said perturbed indicator vector to provide an 
estimation of a distribution of responses, wherein said analyzing comprises: 

for said question being analyzed, calculating an average of each perturbed 
bin in said question, wherein said perturbing mechanism comprises a random number 
generator and said known statistical parameter comprises a mean value, said analyzing 
further comprising for each said perturbed bin in said question, subtracting said mean 
value of said perturbing mechanism associated with said bin . 

2-27. (Canceled) 

28. (New) The method of claim 1, further comprising generating, using said processor, a 
perturbed indicator vector that represents a respondent's response for said question, said 
perturbed indicator vector comprising an information structure including the contents of 
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all bins of said question after said respondent has selected one or more of said possible 
responses and each of the bins has been perturbed. 

29. (New) The method of claim 1, wherein said perturbing mechanism comprises a 
random number generator executed by said processor and said known statistical 
parameter value comprises a mean value of said random number generator. 

30. (New) The method of claim 28, wherein said generating the perturbed indicator 
vector comprises respectively adding numbers from the perturbing mechanism to the 
contents of the bins. 

31. (New) The method of claim 30, further comprising: 

if contents of a bin exceeds an upper bound after perturbation, said contents are 
clamped to said upper bound. 

32. (New) The method of claim 30, further comprising: 

if contents of a bins are below a lower bound after perturbation, said contents are 
clamped to said lower bound. 

33. (New) The method of claim 1, further comprising at least one of: 

setting up a survey question by generating a medium with a plurality of markable 
areas for each possible response and pre-marking a random number of said markable 
areas for each said possible response; and 
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having a respondent respond to the survey question by adding a mark to any of 
remaining non pre-marked markable areas, if any markable areas remain after said pre- 
marking, of the plurality of markable areas for the possible response that corresponds to a 
desired response to the question. 

34. (New) The method of claim 33, further comprising: 

generating a perturbed indicator vector by counting a number of marked areas for 
each response. 

35. (New) The method of claim 28, further comprising: 

for a plurality of responses for a question in said survey, using a processor to 
analyze the bins in said perturbed indicator vector to provide an estimation of a 
distribution of responses. 

36. (New) The method of claim 35, wherein said analyzing comprises: 

for said question being analyzed, calculating an average of each perturbed bin in 
said question. 

37. (New) The method of claim 36, wherein said perturbing mechanism comprises a 
random number generator and said known statistical parameter comprises a mean value, 
said analyzing further comprising: 

for each said perturbed bin in said question, subtracting said mean value of said 

perturbing mechanism associated with said bin. 
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38. (New) The method of claim 1, further comprising: 

for each perturbed bin in said question, adjusting a content of said perturbed bin 
by an amount of said known value of said statisticEil parameter. 

39. (New) An apparatus for conducting a survey, said apparatus comprising at least one 
of: 

a memory for storing a plurality of respondents' responses to a question in said 
survey, wherein each of said respondents' response comprises a bin for each of a possible 
response to said question and a value of each said bin has been perturbed by a perturbing 
mechanism; 

a survey question set-up module executed by a processor on said apparatus, to 
allow a question in said survey to be set up, said survey question set-up module including 
a module to establish a bin for each of a possible response to said question and a 
perturbing mechanism for each said bin that perturbs a content of said bin, each said 
perturbing mechanism having a known value for a statistical parameter; 

a respondent module executed by said processor, including a selection module to 
allow a respondent to select at least one of said possible responses to said question and a 
module to apply said perturbing mechanism for each said bin to generate a perturbed 
indicator vector corresponding to said respondent's selection; 

an analysis module executed by said processor, to retrieve data from said database 
for said question and to analyze each said bin; and 
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a graphic user interface executed by said processor, to allow a user to interface 
with at least one of said memory, said survey question set-up module, said respondent 
module, and said analysis module. 

40. (New) The apparatus of claim 39, wherein said processor causes sdd memory to 
store a running sum of the perturbed indicator vectors. 

41. (New) The apparatus of claim 39, wherein said analysis module calculates an 
average value of each said bin of said question by dividing a sum of the contents in said 
bin of the perturbed indicator vectors by a number of respondents. 

42. (New) A system for conducting a survey, comprising at least one of: 

a memory means for serving as a database to store a plurality of respondent's 

responses to a question in said survey, wherein each said response comprises a plurality 
of bins corresponding to a number of possible answers for said question and each said bin 
is perturbed in value by a perturbing mechanism; 

a survey set-up means for setting up a question in said survey, wherein said 
setting up said question comprises establishing a bin for each of a possible response to 
said question and establishing a perturbing mechanism that perturbs a content of said bin, 
said perturbing mechanism having a statistical parameter with a known value; 

a respondent means for allowing a respondent to select at least one of said 

possible answers to said question, for perturbing a content of each bin in said question 

upon completion of the selection by said respondent, for generating a perturbed indicator 
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vector that includes the contents of all said bins in said question after perturbation, and 

for transmitting said perturbed indicator vector to said database; and 

an analysis means for retrieving and analyzing a content of said bins; and 
a user interface means for allowing a user to interface with at least one of said 

memory means, said survey set-up means, said respondent means, £ind said zmeilysis 

means. 

43. (New) A system for conducting a survey as in claim 42, wherein said memory 
means stores a running sum of the perturbed indicator vectors. 

44. (New) A system for conducting a survey as in claim 42, wherein said analysis means 
calculates an average value for said bin by dividing, by a number of respondents being 
analyzed, the sum of the contents of said bin for all said respondents being analyzed. 

45. (New) A signal-bearing storage medium tangibly embodying a program of machine- 
readable instructions executable by a digital processing apparatus to perform a method of 
at least one of conducting, processing, and analyzing a survey, said program comprising 
at least one of: 

a memory interface to interface with a database that stores a plurality of responses 
to a question in said survey, wherein each said response comprises a perturbed vector 
comprising a bin for each of a possible response for said question, as perturbed by a 
perturbing mechanism having a known value for a statistical parameter; 
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a survey set-up module to allow a question in said survey to be set up, wherein 
said set-up module establishes a bin for each of a possible response to said question, and 
establishes a perturbing mechanism to perturb a content of s£iid bin, said perturbing 
mechanism having a known value for a statistical parameter; 

a respondent module to allow a respondent to select at least one of said possible 
responses to said question, to perturb a content of each bin in said question upon 
completion of the selection, to generate a perturbed indicator vector that includes the 
contents of all said bins in said question after perturbation, and to send said perturbed 
indicator vector to said database; 

an analysis module to retrieve from said database and analyze data for said 
question; and 

a graphic user interface to allow a user to interface with at least one of said 
memory device, said survey set-up module, said respondent module, and said analysis 
module. 

46. (New) The signal-bearing storage medium of claim 45, wherein said memory 
interface includes instructions to store a running sum of the perturbed indicator vectors. 

47. (New) The signal-bearing storage medium of claim 46, wherein said analysis 
module calculates an average value by dividing the sum of the contents of a bin of said 
perturbed indicator vectors by a number of respondents being analyzed. 
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48. (New) A method of conducting a survey, said method comprising: 

for at least one question in said survey, generating an indicator vector from a 
vector whose components respectively represent all possible responses to said question, 
said indicator vector indicating which of said possible responses were selected by a 
respondent; and 

adding a perturbation vector to said indicator vector to provide a perturbed 
indicator vector, 

said perturbation vector having a same number of components as said indicator 
vector, each component in said perturbation vector resulting from a perturbation 
mechanism that is independent of the perturbation mechanism of the other components, 
wherein said perturbation mechanism has a statistical parameter whose value is known. 

49. (New) The method of claim 48, wherein said perturbation mechanism comprises a 
random number generator and said statistical parameter comprises a mean, said method 
further comprising: 

for each at least one question in said survey, calculating an average perturbed 
indicator vector from a plurality N of perturbed indicator vectors, wherein vector 
components of said average perturbed indicator vector respectively comprise an average 
value of corresponding components in said plurality N of perturbed indicator vectors; and 

subtracting from said average perturbed indicator vector a mean vector whose 
components respectively comprise said mean value of said perturbation mechanism for 
each said indicator vector component. 
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50. (New) A method of privacy-preserving data mining, comprising: 

for at least one question in a survey used in said data mining, generating an 
indicator vector from a vector whose components respectively represent one of each 
possible response to said question, said indicator vector indicating which of said possible 
responses were selected by a respondent; and 

adding a perturbation vector to said indicator vector to provide a perturbed 
indicator vector, said perturbation vector having a same number of components as said 
indicator vector, each component in said perturbation vector resulting from a perturbation 
mechanism that is independent of the perturbation mechanism of the other components, 
wherein each said perturbation mechanism has a statistical parameter with a value that is 
known. 

51. (New) A data mining apparatus, comprising: 

an indicator vector generator to generate an indicator vector representing a 
response by a respondent to a survey question; 

a perturbation vector generator to generate a perturbation vector; and 

a perturbed indicator vector generator to add said indicator vector with said 
perturbation vector, 

wherein, for said question, a predefined possible-response vector exists whose 

components respectively represent a possible response to said question, said indicator 

vector comprising a modification of said possible-response vector that represents which 

one or ones of said possible responses were selected by a respondent, said perturbation 

vector comprising a vector having a same number of components as said indicator vector, 
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each component in said perturbation vector resulting from a perturbation mechanism that 
is independent of the perturbation mechanism of the other components, each said 
perturbation mechanism having a statistical parEimeter with a v£ilue that is known. 

52. (New) A signal-bearing storage medium tangibly embodying a program of machine- 
readable instructions executable by a digital processing apparatus to perform a method of 
conducting a survey, said program comprising: 

an indicator vector generator to generate an indicator vector representing a 
response by a respondent to a survey question; 

a perturbation vector generator to generate a perturbation vector; and 

a perturbed indicator vector generator to combine said indicator vector with said 
perturbation vector, 

wherein, for each said question, a possible-response vector exists whose 
components respectively represent a possible response to said question, said indicator 
vector comprising a modification of said possible-response vector that represents which 
of said possible responses were selected by a respondent, said perturbation vector 
comprising a vector having a same number of components as said indicator vector, each 
component in said perturbation vector resulting from a perturbation mechanism that is 
independent of the perturbation mechanism of the other components, each perturbation 
mechanism having a statistical parameter with a known value. 
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